CodeQL library for Java/Kotlin
codeql/java-all 4.2.1-dev (changelog, source)
Search

Predicate TaintTracking::LocalTaintFlow::hasExprFlow

Holds if taint can flow from n1 to n2 in zero or more local (intra-procedural) steps that are restricted to be part of a path between source and sink.

Import path

import semmle.code.java.dataflow.TaintTracking
predicate hasExprFlow(Expr n1, Expr n2)